https://github.com/0xGodson/blogs/blob/master/_posts/2022-03-28-dom-clobbering.md